Turn on device encryption


What is device encryption?

  • Device encryption is available on a wide range of Windows devices and helps protect your data by encrypting it. If you turn on device encryption, only authorized individuals will be able to access your device and data. If device encryption is not available on your device, you can turn on standard BitLocker encryption instead. (BitLocker is not available on Windows 10 Home edition.) 

Is it available on my device?

  • Device encryption is available on supported devices running any Windows 10 edition. Standard BitLocker encryption is available on supported devices running Windows 10 Pro, Enterprise, or Education editions. For example, a Surface Pro, which runs Windows 10 Pro edition, has both the simplified device encryption experience and the full BitLocker management controls. You can check System Information in Windows to see if your device supports device encryption or if you need to use standard BitLocker encryption instead. Here's how: 
    • In the search box on the taskbar, type System Information, right-click System Information in the list of results, and then select Run as administrator.
    • At the bottom of the System Information window, check the value for Device Encryption Support. If the value says Meets prerequisites, that means device encryption is available on your device.

If device encryption is available

  • Here's how to turn on device encryption:
    • Sign in to Windows with an administrator account. For more info, see Create a local or administrator account in Windows 10.
    • Select the Start  button, then select Settings  > Update & Security > Device encryption. (If Device encryption doesn't appear, follow the steps in the If device encryption is not available section of this topic.)
    • If device encryption is turned off, select Turn on

If device encryption is not available

  • If device encryption is not available on your device, follow these steps to turn on standard BitLocker encryption instead:
    • Sign in to your Windows device with an administrator account. For more info, see Create a local or administrator account in Windows 10.
    • In the search box on the taskbar, type Manage BitLocker and then select it from the list of results.
    • Select Turn on BitLocker and then follow the instructions. (If BitLocker is turned on and you want to turn it off, select Turn off BitLocker.)

Additional resources